US government warning about Java

[[JiF]Uncle Stinky]

Wow, this looks pretty serious. I have disabled Java in my browser now.

http://www.nbcnews.com/technology/techn ... -1B7938755" onclick="window.open(this.href);return false;

[[JiF] General WarHawk]

Darn it, I just updated Java too.

-- Sat Jan 12, 2013 6:12 pm --

Pretty easy to disable in Fire Fox.

Just go to Tools, then Add-Ons, and look for Java. Oddly enough Firefox already had a notification from an updated version I did yesterday letting me know that Java was screwed, so I just clicked Disable, and hopefully that's it.

[[JiF]Lt Gav]

Only problem is that I disabled it, then tried to apply for a job online only to find I needed Java running to do it.
What to do? Take a punt on running it & only visit trusted sites would seem to be the simple solution, but that does seem to limit ones browsing activity.
Seems to be one of those damned if you do & damned if you don't situations

[[JiF] General WarHawk]

I noticed a Java update. I have not installed it yet, but I'm hoping within the next month that they'll have a fix and let us know. Granted, they're usually better about telling us the bad new, and not so much about the good news.

[[JiF]FrenchAfroman]

Yep security update came out last week, and seems to be the solution. I installed it and m still running Java. Still nobody who came up to my door and said" I m living here now and your nobody" :-)

[[JiF]CowHide]

A good place to go and check for updates is here: http://www.tweakguides.com/

He's excellent at keeping up to date on reporting updates and issues and I do a quick check everyday.

[[JiF]ALargeWoodenBadger]

Whenever I am forced to look closely at a piece of software through the lens of the news-media I get the chills. Windows, Office, Adobe Reader... all of them seem to have flaws that can be potentially exploited. When they become headlines even the smallest crack appears huge under the media microscope.

When Oracle released this current update "Java Runtime Environment 7 update 11" they admitted that it did not address two known zero-day exploits but they said that these issues were not overly serious due to the convoluted route required to access them. (ie. The PC operator would have to be trolling through weather sites for information on Tsunamis while simultaneously tapping the right mouse button to the tune of “God Save the Queen” and wearing boxer shorts with the same words embroidered on them.) When they explained this I felt relief and began to download the update. Then, that damn microscope reported that a hacker in Asia was auctioning working exploits for the remaining security holes.

Now, not only am I unsure of what to do about Java I apparently have to buy new boxer shorts.

[[JiF] General WarHawk]

Just wash the boxers, disable Java within Firefox (it's in the add-ons) section, and wait until update 12 or 13 comes along. I haven't bothered with update 11, as I thought that was a bit soon to address what was billed as a serious unfixable problem.